Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS147003.roa
File:                     AS147003.roa (raw, json)
Hash identifier:          2+eIuFqSVUvqpw8LTuMR+8Q6X30j7bCc617HL9IRvgA=
Subject key identifier:   E4:32:B4:93:23:2D:86:79:33:33:69:D3:5D:11:75:10:DC:C5:61:77
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       65CA449759FF7DED03C700992BD0F7B824F9618D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS147003.roa
Signing time:             Mon 16 Sep 2024 13:08:20 +0000
ROA not before:           Mon 16 Sep 2024 13:03:20 +0000
ROA not after:            Mon 15 Sep 2025 13:08:20 +0000
asID:                     147003
IP address blocks:        157.254.178.0/23 maxlen: 24
                          157.254.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ca:44:97:59:ff:7d:ed:03:c7:00:99:2b:d0:f7:b8:24:f9:61:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 16 13:03:20 2024 GMT
            Not After : Sep 15 13:08:20 2025 GMT
        Subject: CN=E432B493232D8679333369D35D117510DCC56177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:68:92:e6:5f:64:0c:67:0f:98:7a:c3:48:
                    7e:09:f5:ac:15:eb:8f:6f:80:0b:7c:48:43:7d:c6:
                    8a:14:f6:b9:67:c3:03:36:a3:74:30:3e:b5:27:08:
                    17:af:66:9b:d7:94:00:96:26:a2:26:bc:47:63:eb:
                    a2:8c:04:b4:d9:a2:39:33:de:fb:fb:d5:5f:47:6e:
                    b5:0c:f0:fb:54:c2:88:3e:4a:b2:5a:31:2f:20:80:
                    68:4e:23:62:38:09:28:5f:7f:a9:9e:6a:5f:87:1b:
                    be:b4:ac:38:be:b3:80:55:f5:cd:f9:ab:32:bd:e6:
                    c2:c2:49:2a:33:40:3c:50:0c:83:c3:4f:c7:a4:c8:
                    60:0a:b1:00:66:47:4d:a5:33:0c:c2:75:97:4a:71:
                    49:fe:91:cb:5f:05:43:ca:8b:22:08:c3:86:8e:56:
                    0f:d0:62:f6:96:72:43:8b:d2:b5:36:f0:30:26:e9:
                    f4:43:b9:c8:03:dd:44:d2:bd:47:01:a4:b7:c3:4a:
                    8e:26:21:a6:dd:92:57:cc:72:7b:7a:f1:c6:f0:98:
                    b4:e4:32:7a:a4:9f:ff:91:5a:81:6c:60:7b:42:bd:
                    2a:d1:8f:a0:94:c1:08:b4:c8:70:f8:12:07:3a:ab:
                    0b:18:3f:d4:56:47:1a:85:d0:57:77:b7:da:7f:01:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:B4:93:23:2D:86:79:33:33:69:D3:5D:11:75:10:DC:C5:61:77
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS147003.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.178.0/23
                  157.254.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:30:aa:67:32:c1:70:61:1c:7d:e4:6f:46:91:7e:7c:4e:9d:
         58:1c:97:06:0a:7d:22:41:c0:ca:54:eb:e3:e0:3f:58:3a:c9:
         bd:d7:c4:72:44:8e:b4:85:3e:4d:e2:39:01:65:43:5c:1f:7a:
         81:8e:73:74:5f:4e:30:65:f2:6b:86:4d:c8:bb:a3:20:c3:89:
         8f:a1:a9:c9:14:95:84:64:fc:65:f4:9d:e5:28:0e:dd:58:a4:
         fa:fc:16:48:95:55:86:a3:e0:20:a7:54:a7:4d:6a:fd:d7:5a:
         0b:5c:3d:ee:60:53:d9:1d:dd:f7:44:91:c5:bb:08:a4:fa:ef:
         d3:bd:0f:76:8b:3a:60:89:1f:49:1a:44:32:77:52:22:7b:a5:
         a5:26:09:89:50:d6:69:21:44:25:ea:ce:24:c0:47:33:a4:18:
         14:ea:8c:30:d2:77:a4:86:9c:5c:f4:4b:61:f4:ae:71:98:6b:
         78:3d:83:32:bc:7b:8a:74:7e:89:61:3c:9c:f9:90:c1:7a:44:
         fd:cd:87:89:3c:4b:63:80:37:2e:0f:53:bc:62:48:e4:03:22:
         6a:db:db:86:2c:70:0c:f9:8b:3c:de:35:02:40:f4:88:f8:f6:
         39:bf:0c:25:58:c4:3f:14:ca:ba:46:f2:ce:f7:b7:04:66:bb:
         bb:2b:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org